Information Security Engineer in London

Information Security Engineer

Central London (Marylebone) | Hybrid (2 Days Office) | Up to £70,000 + Excellent Benefits | Private Healthcare | Enhanced Pension | 25 Days Holiday + Bank Holidays | 37.5 Hour Working Week

We're recruiting an Information Security Engineer to join a globally recognised healthcare organisation, helping to protect critical systems, sensitive data and essential business operations.

This is an excellent opportunity to work across a broad security estate covering cloud security, vulnerability management, incident response, security monitoring and security engineering.

You'll work closely with infrastructure, applications and business stakeholders to ensure security remains at the forefront of both operational activity and strategic technology initiatives.

• Information Security Engineer - Key Responsibilities
• Operate and develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting.
• Monitor security tools and alerts, supporting the detection, investigation and response to security incidents.
• Conduct technical investigations, root cause analysis and post-incident reviews.
• Implement, configure and maintain security controls across networks, servers, endpoints, cloud platforms and business-critical systems.
• Administer and optimise Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Entra ID, Microsoft Sentinel and Azure security services.
• Support and enhance endpoint protection, identity security, MFA, email security and log management solutions.
• Work with infrastructure and application teams to ensure systems are securely configured, hardened and maintained.
• Ensure systems and services align with relevant regulatory, compliance and security requirements.
• Maintain security documentation, policies, procedures, standards and audit evidence.
• Provide security input into projects, infrastructure changes and technology deployments.
• Review technical designs and deliver pragmatic, risk-based security recommendations.
• Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders.

Act as a key technical security contact for suppliers, partners and third-party service providers.

• Required Skills & Experience
• Proven experience within an Information Security Engineer, Info Sec, Information Security Analyst, Security Analyst or Cyber Security role.
• Strong technical understanding of cyber security principles, technologies and controls.
• Hands-on experience operating vulnerability management and remediation processes.
• Experience securing cloud, endpoint and network environments.
• Good understanding of identity and access management (IAM), privileged access controls and multi-factor authentication (MFA).
• Experience working within a regulated or compliance-driven environment.
• Experience with Microsoft security technologies, including Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services.
• Ability to assess security risks and translate findings into practical recommendations for stakeholders.

Desirable Experience

• Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH.
• Experience supporting security governance, risk and compliance activities.
• Exposure to security monitoring, threat detection and incident response processes.
• Experience within healthcare, financial services or other highly regulated environments.

What's on Offer?

• Salary up to £70,000
• Private Healthcare
• Enhanced Pension
• 25 Days Holiday plus Bank Holidays
• Hybrid Working (2 Days per Week in the Marylebone Office)
• Ongoing Professional Development and Certification Support
• Exposure to Enterprise-Scale Security Technologies and Projects
• Opportunity to influence and mature security practices across the organisation
• Collaborative and supportive working environment
• #J-18808-Ljbffr